Secure Software/Hardware Hybrid In-Field Testing for System-on-Chip

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Mulhem, Saleh, Ewert, Christian, Neskovic, Andrija, Poudel, Amrit Sharma, Hübner, Christoph, Berekovic, Mladen, Buchty, Rainer
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915155115245568
author Mulhem, Saleh
Ewert, Christian
Neskovic, Andrija
Poudel, Amrit Sharma
Hübner, Christoph
Berekovic, Mladen
Buchty, Rainer
author_facet Mulhem, Saleh
Ewert, Christian
Neskovic, Andrija
Poudel, Amrit Sharma
Hübner, Christoph
Berekovic, Mladen
Buchty, Rainer
contents Modern Systems-on-Chip (SoCs) incorporate built-in self-test (BIST) modules deeply integrated into the device's intellectual property (IP) blocks. Such modules handle hardware faults and defects during device operation. As such, BIST results potentially reveal the internal structure and state of the device under test (DUT) and hence open attack vectors. So-called result compaction can overcome this vulnerability by hiding the BIST chain structure but introduces the issues of aliasing and invalid signatures. Software-BIST provides a flexible solution, that can tackle these issues, but suffers from limited observability and fault coverage. In this paper, we hence introduce a low-overhead software/hardware hybrid approach that overcomes the mentioned limitations. It relies on (a) keyed-hash message authentication code (KMAC) available on the SoC providing device-specific secure and valid signatures with zero aliasing and (b) the SoC processor for test scheduling hence increasing DUT availability. The proposed approach offers both on-chip- and remote-testing capabilities. We showcase a RISC-V-based SoC to demonstrate our approach, discussing system overhead and resulting compaction rates.
format Preprint
id arxiv_https___arxiv_org_abs_2410_05109
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Secure Software/Hardware Hybrid In-Field Testing for System-on-Chip
Mulhem, Saleh
Ewert, Christian
Neskovic, Andrija
Poudel, Amrit Sharma
Hübner, Christoph
Berekovic, Mladen
Buchty, Rainer
Hardware Architecture
Cryptography and Security
Modern Systems-on-Chip (SoCs) incorporate built-in self-test (BIST) modules deeply integrated into the device's intellectual property (IP) blocks. Such modules handle hardware faults and defects during device operation. As such, BIST results potentially reveal the internal structure and state of the device under test (DUT) and hence open attack vectors. So-called result compaction can overcome this vulnerability by hiding the BIST chain structure but introduces the issues of aliasing and invalid signatures. Software-BIST provides a flexible solution, that can tackle these issues, but suffers from limited observability and fault coverage. In this paper, we hence introduce a low-overhead software/hardware hybrid approach that overcomes the mentioned limitations. It relies on (a) keyed-hash message authentication code (KMAC) available on the SoC providing device-specific secure and valid signatures with zero aliasing and (b) the SoC processor for test scheduling hence increasing DUT availability. The proposed approach offers both on-chip- and remote-testing capabilities. We showcase a RISC-V-based SoC to demonstrate our approach, discussing system overhead and resulting compaction rates.
title Secure Software/Hardware Hybrid In-Field Testing for System-on-Chip
topic Hardware Architecture
Cryptography and Security
url https://arxiv.org/abs/2410.05109